A vulnerability in unzip can be exploited by malicious,
local users to perform certain actions on a vulnerable
system with escalated privileges. The vulnerability is
caused due a race condition that exists when the uncompressed
file is closed and before its permissions are changed. This
can be exploited via hardlink attacks to change the permissions
of other files belonging to the user running unzip. Successful
exploitation requires that the malicious user is able to
delete the uncompressed file and replace it with a hardlink
to another file owned by the unzip user, before permissions
are set on the file.

The Common Vulnerabilities and Exposures project (cve.mitre.org)
has assigned the name CAN-2005-2475 to this issue.

SCO is not responsible for the misuse of any of the information
we provide on this website and/or through our security
advisories. Our advisories are a service to our customers
intended to promote secure installation and use of SCO
products.